Use the host cert primarily from /data.